Application Gateway Request Body Inspection

MEDIUM
Source
CloudSploit
ID
application-gateway-request-body-inspection

Application Gateway Request Body Inspection

Ensures that request body inspection is enabled for Application Gateway WAF policy.

Application Gateway WAF policy with disabled request body inspection doesn't evaluate the contents of an HTTP message's body. Enabling it allows us to inspect properties that may not be evaluated in the HTTP headers, cookies, or URI.

Modify application gateway WAF policy and enable request body inspection in policy settings.